tekton-operator-0.70.2

A Helm chart to deploy the Tekton Operator and its CRDs

Tekton Operator release v0.70.2 "Spotted Dove LTS"

-Docs @ v0.70.2
-Examples @ v0.70.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.70.2/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.70.2/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.70.2@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

What's Changed

• [release-v0.70.x] Fix Conflict between Results PreReconciler and Reconciler by @tekton-robot in #2016
• [release-v0.70.x] Fix Results version not reflecting in certain flow by @tekton-robot in #2017
• [release-v0.70.x] Fix the results reconciler's manifest reference by @tekton-robot in #2018
• [release-v0.70.x] Fix filter and Transform for TektonResult by @tekton-robot in #2025
• Revert "Added filesystem-custom-path to allowed x509 fulcio providers" by @PuneetPunamiya in #2030
• [bot] bump payload versions by @github-actions in #2039
• [bot] bump payload versions by @github-actions in #2045
• [v0.70.x] prepare v0.70.1 patch release by @jkandasa in #2046
• [bot] bump payload versions by @github-actions in #2048
• [release-v0.70.x] update OpenShift bundle features annotations by @tekton-robot in #2055
• [v0.70.x] prepare v0.70.2 patch release by @jkandasa in #2056
• [bot] bump payload versions by @github-actions in #2062
• [release-0.70.x] Update component versions in the clusterserviceversi… by @vdemeester in #2067
• [bot] bump payload versions by @github-actions in #2070
• [bot] bump payload versions by @github-actions in #2074
• Bump tkn version to v0.35.2 by @piyush-garg in #2077
• [bot] bump payload versions by @github-actions in #2088
• [release-v0.70.x] perform manifest transformation earlier by @tekton-robot in #2090
• [bot] bump payload versions by @github-actions in #2106
• [release-v0.70.x] apply nodeSelector, tolerations, and priorityClassName into pipelines-console-plugin pod by @tekton-robot in #2110
• [release-v0.70.x] HPA creation enabled via options by @tekton-robot in #2112
• [release-v0.70.x] [2100] Reconcile a namespace again with missing rolebinding by @tekton-robot in #2113
• [release-v0.70.x] Wrap errors with more context while creating resources in the operator by @tekton-robot in #2114
• [0.70.0] update kubernetes release artifacts bundle by @jkandasa in #2013

Full Changelog: v0.70.0...v0.70.2

Thanks

Thanks to these contributors who contributed to v0.70.2!

• ❤️ @PuneetPunamiya
• ❤️ @github-actions[bot]
• ❤️ @jkandasa
• ❤️ @piyush-garg
• ❤️ @tekton-robot
• ❤️ @vdemeester

Extra shout-out for awesome release notes:

• 😍 @PuneetPunamiya
• 😍 @piyush-garg
• 😍 @tekton-robot

Tekton Operator release v0.70.0 "Spotted Dove LTS"

-Docs @ v0.70.0
-Examples @ v0.70.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.70.0/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.70.0/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.70.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• ✨ Adds recently added pipelinerun and builder artifacts to chains spec (#1999)

Adds support for `artifacts.pipelinerun.enable-deep-inspection` and `builddefinition.buildtype` to Chains spec

• ✨ Update the volumes of pipelines-scc to add support for CSI. (#1958)

SecurityContextConstraints (SCC) pipelines-scc now supports CSI Volume Types

• ✨ Add OpenShift PostReconcile Extension for Results Route RBAC (#1947)

system:authenticated user can view route for Tekton Results API endpoints.

• ✨ [main] add hpa under options and support pod template labels and annotations (#1942)

- Added support to update HorizontalPodAutoscaler via `options`. create HPA options is disabled see https://github.com/tektoncd/operator/issues/2002
- Added support for adding labels and annotations on Deployments and StatefulSets podTemplate via `options`.

• ✨ Add config leader election configmaps (#1935)

Add config leader election configmaps for operator controller, operator webhook and proxy webhook

• ✨ [main] manage pipeline console plugin deployment on openshift (#1895)

Fixes

• 🐛 Add Transformer for Watcher Container Env (#1966)
• 🐛 [main] include webhook podname in charts deployment (#1936)
• 🐛 [main] ignore nested struct in AddConfigMapValues transformer (#1848)

Misc

• 🔨 Bump github.com/tektoncd/triggers from 0.25.3 to 0.26.0 (#1970)
• 🔨 Bump golang.org/x/mod from 0.14.0 to 0.15.0 (#1969)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.23.0 to 0.24.0 (#1963)
• 🔨 Bump github.com/tektoncd/pipeline from 0.55.0 to 0.56.0 (#1945)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.22.6 to 0.23.0 (#1932)
• 🔨 Bump golang.org/x/sync from 0.5.0 to 0.6.0 (#1923)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.22.5 to 0.22.6 (#1922)
• 🔨 Bump github.com/tektoncd/pipeline from 0.54.0 to 0.55.0 (#1908)
• 🔨 Bump github.com/spf13/viper from 1.18.1 to 1.18.2 (#1907)
• 🔨 Bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#1902)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.22.4 to 0.22.5 (#1901)
• 🔨 Bump github.com/spf13/viper from 1.17.0 to 1.18.1 (#1892)
• 🔨 Bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.2 (#1891)
• 🔨 Bump github.com/tektoncd/pipeline from 0.53.2 to 0.54.0 (#1889)

Docs

Thanks

Thanks to these contributors who contributed to v0.70.0!

• ❤️ @PuneetPunamiya
• ❤️ @bdellegrazie
• ❤️ @davidumea
• ❤️ @dependabot[bot]
• ❤️ @jkandasa
• ❤️ @khrm
• ❤️ @matzew
• ❤️ @piyush-garg
• ❤️ @pratap0007
• ❤️ @sabre1041
• ❤️ @savitaashture
• ❤️ @sudhishmk
• ❤️ @tekton-robot
• ❤️ @vdemeester

Extra shout-out for awesome release notes:

• 😍 @PuneetPunamiya
• 😍 @bdellegrazie
• 😍 @davidumea
• 😍 @jkandasa
• 😍 @khrm
• 😍 @matzew
• 😍 @piyush-garg
• 😍 @pratap0007
• 😍 @sabre1041
• 😍 @savitaashture
• 😍 @tekton-robot

tekton-operator-0.70.0

A Helm chart to deploy the Tekton Operator and its CRDs

Tekton Operator release v0.69.1 "Black Drongo"

-Docs @ v0.69.1
-Examples @ v0.69.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.69.1/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.69.1/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.69.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• ✨ Add support to update PriorityClassName via options (#1844)

Allow to update PriorityClassName via options in Deployment and StatefulSet

Fixes

• 🐛 [release-v0.69.x] Fix config leader election configmap name (#1882)
• 🐛 ignore replicas for the resources which is managed by HPA (#1752)

 If a Deployment or StatefulSet has a Horizontal Pod Autoscaling (HPA) and is in active state, Operator will not control the replicas to that resource. However if `status.desiredReplicas` and `spec.minReplicas` not present in HPA, operator takes the control. Also if HPA disabled, operator takes control. Even though the operator takes the control, the replicas value will be adjusted to the hpa's scaling range.

• 🐛 [release-v0.69.x] fix 'G601: Implicit memory aliasing in for loop' linter issue on cabundle.go file (#1888)
• 🐛 [release-v0.69.x] fix operator webhook upgrade issue by adding unique identifier and revert gracefulTermination (#1884)
• 🐛 [release-v0.69.x] fix operator webhook installerset deletion race condition (#1875)
• 🐛 continue the post upgrade on storage migration errors (#1753)
• 🐛 fix role in openshift and include upgrade status (#1750)

Misc

• 🔨 Bump golang.org/x/mod from 0.13.0 to 0.14.0 (#1834)
• 🔨 Bump github.com/go-logr/zapr from 1.2.4 to 1.3.0 (#1833)
• 🔨 Bump golang.org/x/sync from 0.4.0 to 0.5.0 (#1832)
• 🔨 Bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#1831)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.21.2 to 0.21.5 (#1825)
• 🔨 Disable HTTP/2 for webhoook by updating Knative (#1822)
• 🔨 Bump github.com/tektoncd/pipeline from 0.52.1 to 0.53.0 (#1815)
• 🔨 Bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 (#1814)
• 🔨 Bump github.com/docker/docker from 24.0.0+incompatible to 24.0.7+incompatible (#1813)
• 🔨 Bump google.golang.org/grpc from 1.58.2 to 1.58.3 (#1808)
• 🔨 Bump github.com/tektoncd/triggers from 0.25.0 to 0.25.2 (#1802)
• 🔨 Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 (#1777)
• 🔨 Bump github.com/tektoncd/pipeline from 0.52.0 to 0.52.1 (#1776)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.21.1 to 0.21.2 (#1775)
• 🔨 Bump golang.org/x/net from 0.15.0 to 0.17.0 (#1770)
• 🔨 Bump golang.org/x/mod from 0.12.0 to 0.13.0 (#1765)
• 🔨 Bump github.com/spf13/viper from 1.16.0 to 1.17.0 (#1764)
• 🔨 Bump golang.org/x/sync from 0.3.0 to 0.4.0 (#1763)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.21.0 to 0.21.1 (#1759)
• 🔨 Bump github.com/tektoncd/pipeline from 0.51.0 to 0.52.0 (#1708)
• 🔨 Bump gotest.tools/v3 from 3.5.0 to 3.5.1 (#1706)
• 🔨 Bump go.uber.org/zap from 1.25.0 to 1.26.0 (#1704)
• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.20.0 to 0.21.0 (#1695)
• 🔨 Bump github.com/tektoncd/pipeline from 0.49.0 to 0.51.0 (#1658)

Docs

Thanks

Thanks to these contributors who contributed to v0.69.1!

• ❤️ @Basavaraju-G
• ❤️ @cmorinupgrade
• ❤️ @concaf
• ❤️ @dependabot[bot]
• ❤️ @github-actions[bot]
• ❤️ @jkandasa
• ❤️ @khrm
• ❤️ @piyush-garg
• ❤️ @pratap0007
• ❤️ @tekton-robot
• ❤️ @uqix
• ❤️ @vdemeester

Extra shout-out for awesome release notes:

• 😍 @cmorinupgrade
• 😍 @concaf
• 😍 @jkandasa
• 😍 @khrm
• 😍 @piyush-garg
• 😍 @pratap0007
• 😍 @tekton-robot
• 😍 @uqix

tekton-operator-0.69.1

A Helm chart to deploy the Tekton Operator and its CRDs

Tekton Operator release v0.68.1 "Rock Sparrow"

-Docs @ v0.68.1
-Examples @ v0.68.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.68.1/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.68.1/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.68.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

• bumps operand components version
• contains bug fixes

Features

Fixes

• 🐛 [release-v0.68.x] Add list nodes rule for kubernetes-rbac (#1760)

our release note here

• 🐛 [release-v0.68.x] ignore replicas for the resources which is managed by HPA (#1755)

  If a Deployment or StatefulSet has a Horizontal Pod Autoscaling (HPA) and is in active state, Operator will not control the replicas to that resource. However if `status.desiredReplicas` and `spec.minReplicas` not present in HPA, operator takes the control. Also if HPA disabled, operator takes control. Even though the operator takes the control, the replicas value will be adjusted to the hpa's scaling range.
  

• 🐛 [release-v0.68.x] continue the post upgrade on storage migration errors (#1754)
• 🐛 [release-v0.68.x] fix role in openshift and include upgrade status (#1751)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.68.1!

• ❤️ @concaf
• ❤️ @github-actions[bot]
• ❤️ @jkandasa
• ❤️ @khrm
• ❤️ @piyush-garg
• ❤️ @pratap0007
• ❤️ @tekton-robot

Extra shout-out for awesome release notes:

• 😍 @pratap0007
• 😍 @tekton-robot

tekton-operator-0.68.0

A Helm chart to deploy the Tekton Operator and its CRDs

Tekton Operator release v0.68.0 "Rock Sparrow"

-Docs @ v0.68.0
-Examples @ v0.68.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.68.0/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.68.0/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.68.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

----------------------------------------------------------------------
org                      component                version             
----------------------------------------------------------------------
tektoncd                 hub                      "v1.14.0"            
tektoncd                 dashboard                "v0.39.0"           
tektoncd                 pipeline                 "v0.50.1"           
openshift-pipelines      pipelines-as-code        "0.21.0"            
tektoncd                 chains                   "v0.17.0"            
tektoncd                 results                  "v0.8.0"            
tektoncd                 triggers                 "v0.25.0"           
----------------------------------------------------------------------

Features

• ✨ Enable TektonResults access by system:authenticated user (#1680)

• ✨ Add informer for statefulset workloads (#1664)

  • statefulSets watches any changes to statefulSet workload

• ✨ Introduce additional field options to components (#1656)

  • Includes additional field called options into each components. That will allow user to take more control on configMap, deployments and statefulSets.
  • pipeline controller replicas count can be handled under pipeline.performance.replicas.
  • action required: deployments replicas count control is taken into operator. If you have modified replicas count in your deployment, you have to update the same via TektonConfig CR, under options.

• ✨ Add Google Creds for Results (#1652)

  • Pass Google creds for GCS to Results using the following properties:
    gcs_creds_secret_name
    gcs_creds_secret_key

• ✨ Add Metrics for TektonResult (#1599)

  • Metrics results_reconciled added which has log_type which tells us logging type used during installtion of results.

• ✨ Add Metrics for TektonChains (#1598)

  • Metrics chains_reconciled added which has {oci/pipelinerun/taskrun}_{storage/format/signer} information as metrics tags.

• ✨ Access to Results Service and Route for system:authenticated user (#1682)

• ✨ Add support for External DB in Tekton Results (#1654)

Fixes

• 🐛 Changing Shell Image from UBI-minimal to shell image (#1637)

  • Changing Shell Image from UBI-minimal to shell image.

• 🐛 Fix Getting Kubeclient in OpenShift Extension of Pipeline (#1544)

• 🐛 Fix Transformers for Results Configuration (#1539)

• 🐛 [main] [0.67.x] Fix Image Transforms for Results (#1532)

• 🐛 add openshift monitoring label to targetNamespace (#1530)

Misc

• 🔨 Bump Results and Dashboard (#1678)

• 🔨 Updated CRS for for Result (#1573)

• 🔨 Bump github.com/tektoncd/triggers from 0.24.1 to 0.25.0 (#1662)

• 🔨 Bump gomodules.xyz/jsonpatch/v2 from 2.3.0 to 2.4.0 (#1648)

• 🔨 Bump go.uber.org/zap from 1.24.0 to 1.25.0 (#1645)

• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.19.2 to 0.19.4 (#1644)

• 🔨 Bump golang.org/x/mod from 0.11.0 to 0.12.0 (#1605)

• 🔨 Bump gotest.tools/v3 from 3.4.0 to 3.5.0 (#1603)

• 🔨 Bump golang.org/x/sync from 0.1.0 to 0.3.0 (#1585)

• 🔨 Bump golang.org/x/mod from 0.10.0 to 0.11.0 (#1577)

• 🔨 Bump github.com/openshift-pipelines/pipelines-as-code from 0.19.1 to 0.19.2 (#1551)

• 🔨 Bump github.com/tektoncd/triggers from 0.24.0 to 0.24.1 (#1550)

• 🔨 Bump github.com/spf13/viper from 1.15.0 to 1.16.0 (#1538)

• 🔨 Bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#1537)

• 🔨 Update Chains and Add Results to CSV (#1519)

• 🔨 Remove Third Party folder (#1515)

• 🔨 Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#1501)

• 🔨 Bump gomodules.xyz/jsonpatch/v2 from 2.2.0 to 2.3.0 (#1500)

Docs

• 📖 Update Doc for TektonResult (Logging and DB) (#1572)

Thanks

Thanks to these contributors who contributed to v0.68.0!

• ❤️ @PuneetPunamiya
• ❤️ @charlesmorin
• ❤️ @concaf
• ❤️ @dependabot[bot]
• ❤️ @github-actions[bot]
• ❤️ @jimmyjones2
• ❤️ @jkandasa
• ❤️ @kahirokunn
• ❤️ @khrm
• ❤️ @piyush-garg
• ❤️ @savitaashture
• ❤️ @sm43
• ❤️ @tekton-robot
• ❤️ @vdemeester
• ❤️ @vicoooo26
• ❤️ @wolfdate25

Extra shout-out for awesome release notes:

• 😍 @PuneetPunamiya
• 😍 @concaf
• 😍 @jimmyjones2
• 😍 @jkandasa
• 😍 @kahirokunn
• 😍 @khrm
• 😍 @piyush-garg
• 😍 @savitaashture
• 😍 @sm43
• 😍 @tekton-robot
• 😍 @vdemeester
• 😍 @vicoooo26

tekton-operator-0.67.0

A Helm chart to deploy the Tekton Operator and its CRDs